Security & trust

Your money, seriously protected.

Security isn't a feature we added — it's the foundation everything else is built on. Here's how we keep your money and data safe.

Encryption everywhere

Sensitive data is envelope-encrypted at rest and protected in transit with TLS. Card numbers are never stored in plain text, and CVVs are never stored at all.

A PIN on every payment

A separate 6-digit transaction PIN authorises each transfer, conversion and card action — so a hijacked session still cannot move your money.

Two-factor authentication

Add an authenticator code to protect logins and sensitive actions, so a stolen password is not enough.

Hardened credentials

Passwords are hashed with Argon2id — a memory-hard algorithm built to resist brute-force attacks.

Identity verification

Tiered checks — BVN and NIN in Nigeria, ID and proof of address in South Africa — keep bad actors out and unlock higher limits.

Alerts you cannot silence

Failed sign-ins, password and PIN changes and card actions are always emailed to you — these are how you learn someone else is in your account.

Compliance

Operating responsibly.

ElevatePay works with licensed institutions and follows the regulatory standards of the markets we operate in for data protection and anti-money-laundering.

  • NDPR-aligned data handling. Data minimisation, consent and breach-readiness built in.
  • Licensed partners. Funds and crypto are handled through regulated institutions.
  • PCI-DSS posture. Card data is tokenised and encrypted to industry standards.

Found a vulnerability?

We welcome responsible disclosure. Email security@elevatepay.app and we'll respond quickly.

Your money, leveled up.

Open an account in minutes and hold naira, dollars and rand side by side. Nothing to install — it runs in your browser.

Free to open · No card required · Works in any browser

Security · ElevatePay